Security Directory

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

N

Nord Property Ltd

nordproperty.com

43

Nord Property Ltd is a medium-sized real estate company based in Estonia, specializing in international real estate services including brokering, property management, consulting, appraisal, investment counseling, and development sales. The company targets property buyers, sellers, and investors primarily in Estonia and Spain, offering multilingual support and a professional service portfolio. The website is well-structured with clear navigation and relevant content, supporting a good user experience and moderate mobile optimization. Technically, the site uses common analytics and tracking tools such as Google Analytics and Google Tag Manager, along with Google Maps API for location services. However, no CMS or hosting provider details were identified, and performance is moderate.

M

Mediahouse

mediahouse.ee

44

Mediahouse is an established Estonian media and advertising agency founded in 2010, specializing in data-driven digital marketing solutions across Meta and Google channels. The company targets businesses seeking comprehensive media strategies and measurable brand growth. Their website reflects a professional and consistent brand presence with a portfolio of notable clients and recent projects. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Matomo. Security posture is solid with HTTPS and reCAPTCHA implemented, though lacking some security headers and published policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a key area for improvement. Overall, the website is well-designed, user-friendly, and trustworthy, supporting the company's market position as a reliable media partner.

T

The Conversion Department

theconversiondepartment.nl

58

The Conversion Department is a Dutch marketing agency focused on enabling online growth for organizations with growth ambitions. Founded in 2018, the company positions itself as a strategic marketing partner, leveraging modern digital marketing techniques and SEO strategies to help clients achieve their marketing objectives. The website reflects a professional and consistent brand image, utilizing WordPress with popular plugins such as Yoast SEO and Elementor to deliver a good user experience and SEO optimization. The technical infrastructure is solid, hosted by a reputable registrar with DNSSEC enabled and HTTPS enforced, indicating a secure baseline. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. No direct contact information such as emails or phone numbers were found in the provided content, which may hinder user engagement and trust. Security posture is good but could be enhanced by implementing additional security headers and publishing a security policy. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency to elevate trust and compliance standards.

The website cvok.ee is an established Estonian job portal operated by Zone Media OÜ since 2010. It offers job postings, CV database services, and recruitment-related offerings targeting job seekers and employers in Estonia. The platform includes additional services such as accounting and CV expert advice, positioning itself as a comprehensive employment resource in the local market. The site content is primarily in English with options for Estonian and Russian, catering to a diverse audience. Technically, the site uses legacy HTML and JavaScript technologies, including an outdated jQuery version, and integrates Google Analytics for traffic monitoring. The design and user experience are basic, with limited mobile optimization and accessibility features. Security posture is moderate; HTTPS is implied but no advanced security headers or cookie consent mechanisms are present. The WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, enhancing trust. Overall, the site is functional but would benefit from modernization and improved security and privacy compliance.

E

Eliko Location Technologies OU

eliko.ee

61

Eliko Location Technologies OU is a technology company specializing in next-generation location tracking solutions based on ultra-wideband (UWB) technology. Their website presents a mature and professional digital presence, highlighting their RTLS products, case studies with reputable clients such as Bosch, and a strong emphasis on accuracy, reliability, and tailored solutions for industrial and immersive applications. The company targets machine builders, enterprise software providers, and manufacturing operations, positioning itself as a trusted provider with over 200 companies relying on their technology. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism, demonstrating awareness of privacy and security best practices. However, explicit privacy policies, terms of service, and security policies are not found, representing areas for improvement. DNSSEC is not enabled, which could enhance DNS security. Overall, the security posture is good but could be strengthened with more explicit documentation and technical controls. The domain WHOIS data aligns well with the website content, showing consistent registrant information and appropriate domain age, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategically, Eliko is well-positioned in the RTLS market with a solid technical foundation and trusted customer base. Enhancing transparency around privacy, security policies, and incident response would further strengthen trust and compliance posture.

A

Atom

cyberland.io

75

Atom operates a professional domain marketplace platform offering premium domain names such as CyberLand.io. The website is well designed, mobile optimized, and provides multiple contact channels including phone, email, and chat support. The platform targets startups and technology companies seeking brandable domain names. Technically, the site uses modern monitoring tools like New Relic and Google Tag Manager, and enforces HTTPS for secure communications. However, the absence of privacy and cookie policies, as well as missing WHOIS data for the domain, present gaps in compliance and trust verification. Security posture is generally good with no visible vulnerabilities, but could be improved with additional security headers and explicit policies. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

O

OÜ KINO MAASTIKUARHITEKTID

kinoline.ee

53

OÜ KINO MAASTIKUARHITEKTID is a small Estonian landscape architecture firm specializing in the design of public spaces, parks, and urban landscapes that blend modern design with sustainable thinking. The company presents a professional online portfolio showcasing recent projects and maintains active social media channels to engage with clients and the public. The website is built on a modern WordPress platform using Elementor and Jet plugins, optimized for mobile devices and SEO. Security posture is solid with HTTPS enabled and a comprehensive cookie consent mechanism in place, though additional security headers could enhance protection. The domain registration is transparent and consistent with the business's Estonian location and timeline. Overall, the website reflects a credible, professional business with good digital maturity and compliance with privacy regulations.

M

METUS

metus.com

42

METUS is a specialized provider of professional audio and video systems and solutions, targeting sectors such as broadcast, medical, military, corporate, education, government, and news agencies. The company offers a suite of products including media asset management, ingest and streaming solutions, and NDI stream management tools. The website reflects a niche B2B business model with a focus on media technology professionals. Technically, the site uses common JavaScript libraries and tracking tools, hosted on HostGator, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain is long-established since 2002, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

J

John Deere

johndeere.com

58

John Deere is a globally recognized enterprise specializing in manufacturing and selling agricultural, construction, forestry, and landscaping equipment. The website serves as a comprehensive portal for product information, dealer location, parts and service, financial services, and digital tools, targeting customers in agriculture, construction, and related industries. The site demonstrates a mature digital presence with extensive product catalogs and clear navigation tailored to diverse user segments. Technically, the website employs modern JavaScript libraries, Adobe Dynamic Tag Management for analytics, and OneTrust for cookie consent management, hosted likely on Akamai infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Performance is moderate with room for optimization. Security posture is strong with HTTPS enforced and cookie consent implemented; however, explicit security headers and published security policies are absent. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is notable but likely due to privacy or query limitations rather than malicious intent. Overall, the website presents a low risk profile with strong business credibility and technical implementation. Strategic improvements in security transparency and privacy policy visibility would enhance trust and compliance.

A

abmcloud

abmcloud.com

60

ABM Cloud is a technology company specializing in cloud-based business software solutions focused on supply chain optimization, logistics, and retail management. The company offers a suite of SaaS products designed to automate and improve business processes for manufacturers, distributors, and retailers across multiple countries. With projects completed in 32 countries and over 500 clients, ABM Cloud holds a solid market position in the business automation sector. The website is built on WordPress and integrates multiple modern analytics and marketing tools such as HubSpot, Google Tag Manager, Hotjar, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. The site is well-structured with good SEO practices and mobile optimization, although accessibility features are basic. The technical stack and hosting appear reliable, with domain registration consistent with the company's claimed history. Security posture is moderate; HTTPS is enforced, and domain transfer protections are in place, but DNSSEC is not enabled and security headers are missing. No explicit security or incident response policies are published, and privacy compliance is limited by the absence of a privacy policy page. The site uses extensive tracking and data collection via forms and third-party scripts, which may raise privacy concerns. Overall, ABM Cloud presents a professional and credible business front with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and reduce risk exposure.

O

OÜ Nõo Lihatööstus

noo.ee

49

OÜ Nõo Lihatööstus is an established Estonian meat manufacturing company with a digital presence via a WordPress and WooCommerce-based website. The company focuses on producing quality meat products targeted primarily at local consumers and families. The website reflects a moderate level of digital maturity with good content quality, consistent branding, and a functional e-commerce platform. Technical infrastructure includes modern web technologies and integration with payment services such as Montonio. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the site is accessible and professionally presented, supporting the company's market position as a trusted local manufacturer.

The website healthboards.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically error 1005 indicating that the ASN of the visitor's IP address is banned by the site owner. This prevents access to any substantive content, including privacy policies, contact information, or business descriptions. The domain is long-established, registered since 1998 with GoDaddy, and uses Cloudflare for DNS and security services. Due to the WAF block, no detailed content or technical infrastructure beyond Cloudflare usage can be assessed. Security posture cannot be fully evaluated, but the lack of DNSSEC and security headers is noted. Overall, the site appears legitimate based on WHOIS data but is currently inaccessible for detailed analysis.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

C

ClanBeat

clanbeat.com

65

ClanBeat operates the website clanbeat.com, offering an app focused on supporting well-being and nurturing social and emotional learning through co-creation. The company targets educators, students, international schools, fitness communities, and lifelong learning communities. The business model centers on providing digital tools for well-being tracking, quality reflections, meaningful connections, and co-creation, positioning itself as a niche player in the education technology sector. The website is professionally designed with clear navigation and good content quality, supporting its market position as a specialized educational app provider. Technically, the site is built on WordPress, leveraging modern technologies such as NitroPack for performance optimization, Google Tag Manager for analytics, and Cloudflare for DNS services. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections in place; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Business credibility is supported by consistent branding and structured data but is limited by the absence of direct contact information and security policies. Overall, the site scores moderately well but should address privacy and security policy gaps to enhance trust and compliance.

R

Rederij Groen

rederijgroen.nl

36

Rederij Groen is a well-established Dutch offshore shipping and service company specializing in various types of support vessels including seismic supply, guard vessels, and crew tenders. Founded in 1973, the company has grown to operate a modern fleet serving global offshore energy clients. The website reflects a mature business with clear service offerings, a detailed company history, and recognized ISO certifications that emphasize quality, safety, and environmental responsibility. Technically, the site is built on WordPress with modern plugins and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but includes a cookie consent banner and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with the company’s business profile.

A

Advokaadibüroo LINDEBERG

lindeberg.legal

30

Advokaadibüroo LINDEBERG is a well-established Estonian law firm providing comprehensive legal services across major law domains including private law, public law, IT and intellectual property, and dispute resolution. The firm serves a diverse clientele including businesses, individuals, and the public sector, with a strong reputation in litigation and recognized partnerships such as with the Estonian E-commerce Association. Their website reflects a professional and consistent brand image, multilingual support, and a broad service offering. Technically, the site is built on WordPress with WooCommerce and enhanced by various plugins for SEO, analytics, and marketing, demonstrating a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and GDPR compliant, with clear contact information and active use of analytics and marketing pixels under consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading legal service provider in Estonia.

L

Lectra

lectra.com

33

Lectra is a leading provider of Industry 4.0 transformative technologies and premium solutions targeting the fashion, automotive, and furniture manufacturing sectors. The company focuses on enabling digital transformation, operational excellence, and sustainability through software, equipment, data, and services. The website reflects a mature digital presence built on Drupal 10, integrating modern analytics and marketing tools. Security posture is strong with HTTPS and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is good with a clear privacy policy but lacks explicit cookie consent mechanisms. The absence of WHOIS data for the domain introduces a minor trust concern but does not detract significantly from the overall credibility. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and implementing cookie consent to improve compliance.

K

Kumera Corporation

kumera.com

33

Kumera Corporation is a well-established Finnish company specializing in manufacturing and marketing industrial and marine gearboxes, power transmission products, and engineering services. The company targets industrial sectors such as manufacturing, marine, energy, and heavy-duty industries, offering a broad range of products including custom-built gearboxes and propulsion systems. Their market position is supported by a long domain registration history and a consistent brand presence online. Technically, the website is built on WordPress with Elementor, leveraging modern plugins and a Cloudflare-based hosting infrastructure. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and Google reCAPTCHA in place, but could be improved by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is partially addressed with a comprehensive cookie consent mechanism, but lacks a visible privacy policy or terms of service. Contact information is primarily via forms, with no explicit emails or phone numbers found. Overall, the website is professional and trustworthy, but could enhance transparency and security practices further.

V

Veebimajutus.ee

veebimajutus.ee

55

Veebimajutus.ee is an Estonian technology service provider specializing in domain registration, web hosting, website creation, and email hosting services. The company targets Estonian businesses and individuals seeking an integrated and user-friendly platform to manage their online presence. Their market position is that of a trusted local provider with a focus on ease of use and customer support. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, and enforces HTTPS with strong security headers, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies represents a compliance gap that should be addressed. Security posture is strong with no visible vulnerabilities, but incident response and security policies are not publicly documented. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy compliance and transparency are recommended.

R

RWTH Aachen University

rwth-aachen.de

63

RWTH Aachen University is a leading technical university in Germany, offering comprehensive academic programs, cutting-edge research, and strong corporate partnerships. The website serves a diverse audience including prospective and current students, researchers, and corporate visitors. It provides extensive information on academics, research projects, corporate relations, and university services. The university maintains a strong market position as a center of excellence in education and research. Technically, the website uses a custom CMS with modern JavaScript libraries like jQuery and Chosen, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and well-structured, reflecting the university's reputable standing.

Oshino Electronics Estonia OÜ is a well-established electronic contract manufacturing company based in Estonia, founded in 2010. It offers comprehensive services including product design, industrialization, manufacturing, and support, focusing on prototype assembly and small to medium volume production runs. The company is part of the larger Oshino Group, enhancing its market position and capabilities. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting industrial and automotive sectors. Technically, the site is built on WordPress with the Avada theme and uses modern technologies such as jQuery and Google reCAPTCHA, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, but lacks some security headers and formal policies, which are recommended for improvement. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

D

DeltaHeroes OÜ

deltaheroes.com

42

DeltaHeroes OÜ is a small Estonian consulting firm specializing in strategic partnership consulting, focusing on connecting Asia-Pacific with Estonian technology companies. Their core business involves investment scouting, matchmaking between startups and enterprises, organizing business delegations, and conducting seminars on corporate innovation and strategic investment. The company positions itself as a bridge between the Baltic and Asian regions, targeting entrepreneurs, investors, and enterprises interested in cross-regional collaboration. Technically, the website employs modern web technologies including Google reCAPTCHA for form security, Google Tag Manager for analytics, and lazy loading for images to optimize performance. The site is mobile-optimized with good navigation and SEO practices. Hosting appears to be managed via NameCheap, consistent with the domain registrar information. From a security perspective, the website enforces HTTPS and uses CAPTCHA on its contact form, which are positive indicators. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, representing an area for improvement. Overall, the website is professional and credible with consistent WHOIS data and clear business information. The main risks relate to privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms to enhance trust and compliance.

Entigo is a technology company specializing in container management platforms, site reliability engineering as a service, and hands-on training for development and platform teams. Positioned as a niche B2B provider, Entigo targets developers and enterprises adopting cloud-native containerized infrastructure. The company demonstrates strong market positioning through partnerships with AWS, Google Cloud, and Kubernetes certifications, supported by ISO 9001 quality management certification. Technically, the website is built on modern frameworks including Next.js and Strapi CMS, hosted on Vercel, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for its target audience.

T

TESRON EHITUS OÜ

tesron.ee

43

Tesron Ehitus OÜ is an Estonian construction company specializing in general contracting, project management, and design services. Founded in 2018, the company employs experienced construction professionals and emphasizes systematic, innovative, and thoughtful work. The website reflects a focused business model targeting local Estonian clients in the construction and real estate sectors, showcasing ongoing projects and company credentials. The digital presence is built on WordPress with common plugins, providing a functional and moderately optimized user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and incident response transparency are recommended. Privacy compliance is partially met with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and trustworthy, supporting the company's market position as a reliable construction service provider in Estonia.

T

TaxScouts

taxscouts.com

72

TaxScouts is an established UK-based online tax return service founded in 2017, specializing in simplifying Self Assessment tax returns by pairing customers with accredited accountants. The company positions itself as a fast, affordable, and fully online solution targeting UK taxpayers who require assistance with personal and company tax filings. The website demonstrates a professional and consistent brand presence with clear service offerings and trust signals such as embedded Trustpilot reviews. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools including PostHog, Google Tag Manager, and Microsoft Clarity, with Cloudflare DNS and NameCheap as registrar. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and publishing explicit security policies or vulnerability disclosures. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned cookie policy. However, explicit privacy policy and terms of service pages are not clearly found in the provided content. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

Holini

holini.com

66

Holini is a specialized Google Ads and analytics agency focused on serving B2B technology companies. The company emphasizes deep expertise by employing only senior specialists, avoiding one-off hacks, and following systematic growth and testing processes. Their market position is that of a niche expert agency with strong trust signals including Google Partner status, Premier Partner Awards, and positive client testimonials. The website content and branding are consistent and professional, targeting CMOs and marketers in the B2B tech sector. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, showing a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS enabled and consent management implemented, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration is consistent with the business history and shows no suspicious patterns. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism.

OÜ Tormitehnika is a small Estonian company specializing in manufacturing and selling marine equipment such as floating docks, buoys, swimming ladders, and boat stands. The website serves as a basic informational portal targeting maritime professionals and boat owners primarily in Estonia. The business operates in a niche market with a local focus and provides clear contact information but lacks comprehensive online policies and advanced digital features. Technically, the website is built on an outdated WordPress 4.9.3 platform with legacy jQuery libraries, which poses security risks and limits modern functionality. The site uses Google Analytics for visitor tracking but does not implement cookie consent or privacy policies, indicating low privacy compliance. Security posture is weak due to missing security headers and outdated software, although HTTPS is enabled. Overall, the website is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

E

Edicy

edicy.com

59

Edicy is a technology company offering a SaaS platform focused on no-code landing page creation tailored for startups, small businesses, and marketers. The platform emphasizes ease of use, professional design templates, and integration with popular marketing tools such as Mailchimp, HubSpot, Google Analytics, and Meta. The website presents a polished, mobile-optimized user experience with clear navigation and comprehensive content about the product's features and benefits. Technically, the site leverages modern JavaScript libraries, analytics platforms, and a cookie consent management system to ensure compliance and user tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The WHOIS data is missing or unavailable, which is unusual and reduces domain trust, but the website's professional presentation and social media presence support legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

J

JABLAY123

themissionsociety.org

49

JABLAY123 is an online gambling-related website primarily focused on providing alternative access links and promotional content for slot games and casino gambling. The site offers various gambling game types and live chat support but lacks formal business contact information and compliance documentation. Technically, the website is built on the Squarespace platform with modern HTTPS and HSTS security but lacks important security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site presents basic content and technical implementation but falls short on privacy, security best practices, and business credibility.

C

Colombo Stock Exchange

cse.lk

72

The Colombo Stock Exchange (CSE) is the primary stock exchange in Sri Lanka, serving as a critical financial market infrastructure provider. The website offers comprehensive information on equity and debt trading, market disclosures, financial reports, and investor education. It targets investors, listed companies, and financial professionals within Sri Lanka and the broader financial community interested in Sri Lankan markets. The CSE holds a significant market position as the national stock exchange, facilitating capital market activities and supporting economic growth.

F

Fairown

fairown.com

62

Fairown operates a buyback and credit system aimed at consumers who want to resell or dispose of products easily. The company positions itself as a niche retail service provider offering convenience and choice to customers. The website is built on the Wix platform, leveraging Wix Thunderbolt and standard web technologies, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and uses HTTPS with some JavaScript security hardening. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Additionally, the lack of privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. Overall, while the business model and website content are clear and professional, the security and compliance posture require improvement to enhance trust and regulatory adherence.

E

ETS NORD

etsnord.com

63

ETS NORD is a manufacturing company specializing in ventilation products and solutions, targeting professional and business customers primarily in Northern Europe. The company emphasizes sustainability and quality, supported by ISO 9001 and ISO 14001 certifications. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on WordPress with modern tools such as Gravity Forms and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and certifications. Overall, the website is reliable and suitable for its business purpose, with room for improvement in transparency and security documentation.

Dun & Bradstreet is a globally recognized enterprise specializing in business data and analytics, offering services that help companies achieve sales and marketing goals, navigate supply chains, and reduce credit risk. The website content is professionally presented in Estonian, targeting business customers in Estonia and potentially broader markets. The company leverages a mature digital infrastructure including Adobe Experience Manager CMS and advanced analytics tools such as Google Tag Manager and Adobe Helix RUM, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism via TrustArc, though explicit security headers and incident response information are absent. Overall, the website reflects a trustworthy and professional business presence with room for improvement in transparency and security disclosures.

K

Kõnelev Trumm OÜ

eksootika.ee

49

The website eksootika.ee represents a small Estonian e-commerce business named Kõnelev Trumm OÜ, specializing in exotic goods sourced from various Asian countries such as India, Indonesia, Thailand, and Nepal. The site offers a range of products including ethnic musical instruments, semi-precious stones, incense, clothing, and jewelry. The business targets consumers interested in unique Asian cultural products and operates primarily through an online store with additional wholesale options. The website is built on the Voog CMS platform, leveraging Voog's e-commerce capabilities, and integrates modern JavaScript libraries and Google Analytics for tracking and marketing purposes. Hosting is provided by Zone Media OÜ, consistent with the domain registration data.

A

Apifonica

apifonica.com

80

Apifonica is a medium-sized telecommunications technology company specializing in AI-powered customer communication solutions including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving over 200 clients with thousands of integrations. Their technical infrastructure leverages modern web technologies such as Vue.js and integrates with major analytics and marketing tools like Google Analytics and HubSpot. Security posture is strong, evidenced by ISO 27001 certification, regular penetration testing, and GDPR compliance. The website is professionally designed, mobile-optimized, and provides comprehensive legal and security documentation. However, the absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, though the overall business credibility remains high based on content and certifications. Strategic recommendations include improving transparency on domain registration and publishing additional security headers and a security.txt file.

W

Whirlpool Europe

whirlpool.eu

77

Whirlpool Europe operates as the regional web presence for Whirlpool Corporation, a leading global manufacturer of home appliances. The website serves multiple European markets with localized content and provides product information, customer support, and store locator services. The site demonstrates a professional design with consistent branding and a focus on European consumers. Technically, the website employs modern JavaScript libraries, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is served over HTTPS with good SSL configuration, though it lacks some advanced security headers. Privacy compliance is partially addressed through cookie consent mechanisms, but explicit privacy policy and terms of service documents were not detected in the provided content. No contact information or forms were found, which may impact user trust and compliance. Overall, the domain appears legitimate and consistent with a major brand, though WHOIS data is privacy protected as typical for .eu domains.

O

Operail OÜ

evrcargo.ee

54

Operail OÜ is an Estonian-based international railway company specializing in freight transport, rolling stock rental, maintenance, repair, and locomotive construction. With a history tied to over 150 years of railway operations in Estonia, the company serves import, export, domestic, and transit freight markets, positioning itself as a reliable and operationally efficient partner. The website reflects a medium-sized enterprise with a clear focus on transportation services within Estonia and neighboring regions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credible market presence.

W

Wine Library

winelibrary.com

63

Wine Library is a well-established online retailer specializing in wines, spirits, beer, and gourmet products. Founded in 1997, it has built a strong market presence in the United States with a medium-sized operation focused on e-commerce. The website offers a rich user experience with curated wine selections, expert ratings, wine clubs, and educational content, targeting wine enthusiasts and consumers seeking quality alcoholic beverages online. The business model centers on direct online sales complemented by subscription wine clubs and marketing via email and social media channels. Technically, the website leverages a modern technology stack including Ruby on Rails, Google Analytics, Facebook Pixel, and Cloudflare DNS/CDN services. The site is mobile-optimized with good SEO practices and uses several third-party marketing and analytics tools. Performance is moderate, with room for improvement in accessibility and some technical SEO aspects. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements secure forms. However, it lacks DNSSEC, explicit security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, Wine Library presents a credible, professional, and secure online retail platform with minor gaps in privacy compliance and security transparency. Strategic improvements in cookie consent, security headers, and incident response disclosure would enhance trust and compliance.

G

GoSwift

goswift.eu

63

GoSwift is a technology company specializing in digital transportation management solutions aimed at optimizing logistics and freight operations. The company offers services such as scheduling arrivals, queue management, automated access, and yard management, targeting logistics operators and industrial clients. The website demonstrates a professional digital presence with multilingual support and trusted client logos, indicating a credible market position in the transportation sector. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is good with HTTPS enforced, though security headers and explicit privacy policies are lacking. Overall, the site is well-structured and user-friendly but could improve transparency and compliance documentation. Strategic recommendations include adding privacy and terms policies, enhancing security headers, and providing clear contact and incident response information.

F

Formaloo

formaloo.net

67

Formaloo is a technology company providing an all-in-one SaaS platform for creating online forms, custom CRMs, dashboards, client portals, and workflow automation enhanced with AI capabilities. The platform targets a broad audience including marketing teams, HR departments, startups, enterprises, and agencies, positioning itself as a comprehensive solution for business process digitization and automation. The website demonstrates a high level of digital maturity with modern web technologies such as Webflow CMS, Google Tag Manager, Amplitude Analytics, and OAuth-based Google Sign-In integration. The design is professional, mobile-optimized, and user-friendly, supporting a positive user experience. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy or data retrieval issues, which impacts the overall trustworthiness assessment. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and clarifying domain registration details to enhance business credibility and trust.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

H

Hong Kong Applied Science and Technology Research Institute Company Limited

astri.org

71

Hong Kong Applied Science and Technology Research Institute Company Limited (ASTRI) is a government-founded R&D institute established in 2000 to enhance Hong Kong's competitiveness in technology-based industries through applied research. The organization operates as a large, government-affiliated entity with a strong focus on technology innovation, patenting, and technology transfer to industry. Their website reflects a mature digital presence with comprehensive content, multilingual support, and a professional design. Technically, the site is built on WordPress with modern plugins and Google Analytics integration, offering good performance and mobile optimization. Security posture is solid with HTTPS and hCaptcha usage, though explicit security headers and published security policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website and organization demonstrate high business credibility and trustworthiness, though improvements in security transparency and privacy compliance are recommended.

P

PR Strategies OÜ

prstrategies.ee

49

PR Strategies OÜ is a small Estonian public relations and communication agency, officially representing the global Hill+Knowlton Strategies network in Estonia. The company provides a broad range of communication services including internal and external communication, crisis communication, media relations, event organization, and strategic consultancy. The website is professionally designed, mobile-optimized, and presents clear navigation and relevant content primarily in Estonian. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, Google Fonts, and Google Maps API, hosted likely by Zone Media OÜ, consistent with the domain registration data. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided with a company email and physical address, but no phone numbers or social media links are present. Overall, the website is trustworthy and credible, with strong business legitimacy and partner affiliations.

C

Crane Service Inc

craneserviceinc.com

53

Crane Service Inc is a well-established North American company specializing in heavy lift, rigging, heavy hauling, alternative movement, and warehouse/storage services. Founded in 1998, the company positions itself as a trusted leader with a modern fleet and a strong safety record. Their website reflects a professional and consistent brand image targeting industrial clients requiring specialized crane and rigging services. Technically, the site is built on WordPress with the Divi theme and integrates modern JavaScript libraries and Google Analytics for tracking. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, supporting the company's market position.

P

Producement

producement.com

59

Producement is a small Estonian technology company specializing in startup product engineering services. Founded in 2017, the company helps founders rapidly build and scale their products while investing sweat equity to become shareholders. Their key services include product engineering, full-stack development, and tech recruitment. The company positions itself as a niche partner for early-stage startups, aiming to build successful startups and help them become independent. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern tools such as Google Analytics and Cloudflare DNS, but hosting provider details are not explicit. Security posture is solid with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, including email and physical address, along with social media presence. Overall, the website is trustworthy and credible but could improve privacy and security transparency.

A

Avera-Trading AS

avera.ee

44

Avera-Trading AS operates a professional e-commerce website focused on retailing cleaning chemicals, equipment, and hygiene products primarily in Estonia. Established in 2010, the company presents a well-structured online catalog with clear pricing and product categorization, targeting businesses and consumers seeking cleaning solutions. The website leverages WordPress and WooCommerce platforms, enhanced with popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. Integration of Google Analytics and Tag Manager reflects a data-driven approach to marketing and user behavior analysis. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance and security improvement opportunities. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security disclosures.

U

UPRENT Ltd.

uprent.eu

47

UPRENT Ltd. is a regional provider specializing in pump rental, energy solutions, and construction equipment across Latvia, Estonia, Lithuania, and Poland. The company offers a broad range of rental equipment including pumps, excavators, generators, and trench support systems, complemented by specialist project services. Their market position is strong within the Baltic region and Poland, supported by a multilingual website and localized contact points. The business model focuses on equipment rental and sales with value-added specialist solutions for industrial and construction clients. Technically, the website is built on a modern WordPress platform with WooCommerce and WPBakery Page Builder, integrating Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Security measures include HTTPS, reCAPTCHA on forms, and nonce tokens, though explicit security headers and policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a published privacy policy and security incident response details indicates room for improvement in compliance and transparency. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, UPRENT presents a professional and trustworthy online presence with comprehensive contact information and clear business focus. Strategic enhancements in privacy documentation, security policies, and accessibility would further strengthen their digital maturity and compliance standing.